Technical Note: FortiManager - Firewall Remote Authentication for System Administrators

[teddyko_FTNT]

Description

This article explains how to configure FortiGate remote system administrators from the FortiManager.

Solution

Generally, FortiGate settings are configured exclusively at one database (Device Database, or Policy Package ADOM DB). One exception is system admins configured with remote authentication.

Remote authentication server should always be configured under Policy & Objects -> Object Configuration. The admin settings are configured under Device Manager.

1)      Policy & Objects -> Object Configurations -> User & Devices

a)       Select Remote Server type (LDAP, RADIUS, TACACS+)

b)      Configure server IP/secret and save

2)      Policy & Objects -> Object Configurations -> User & Devices -> User Groups

a)       Create New Remote Authentication Server

3)      Device Manager -> Edit Device -> System -> Administrator

a)       Configure Remote User Group with group created from step 2

b)      User Group list is pulled from ADOM Database, instead of Device DB